#!/bin/bash
#===============================================================================
sudo ipset -R < YOUTUBE
sudo ipset -R < GOOGLE
sudo ipset -R < NOCLIP
sudo iptables -A INPUT -p tcp --sport 80 --tcp-flags FIN,SYN,RST,ACK SYN,ACK -m state --state ESTABLISHED -m set --match-set NOCLIP src -j ZHANG
sudo iptables -A INPUT -p tcp --sport 80 -m state --state ESTABLISHED -m gfw -j LOG --log-level info --log-prefix "gfw: "
sudo iptables -A INPUT -p udp --sport 53 -m state --state ESTABLISHED -m gfw -j DROP
#sudo echo nameserver 8.8.8.8 > /etc/resolv.conf
